Added new YARA rules.

This commit is contained in:
Threat Analyst
2020-07-15 17:00:01 +02:00
parent b95d1e6bee
commit 909293e33b
134 changed files with 361 additions and 0 deletions
+1
View File
@@ -10,6 +10,7 @@ rule Linux_Virus_Vit : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "VIT"
description = "Yara rule that detects Vit virus."
tc_detection_type = "Virus"
+1
View File
@@ -10,6 +10,7 @@ rule Win32_Virus_Awfull : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "AWFULL"
description = "Yara rule that detects Awfull virus."
tc_detection_type = "Virus"
+1
View File
@@ -10,6 +10,7 @@ rule Win32_Virus_Cmay : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "CMAY"
description = "Yara rule that detects Cmay virus."
tc_detection_type = "Virus"
+1
View File
@@ -10,6 +10,7 @@ rule Win32_Virus_DeadCode : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "DEADCODE"
description = "Yara rule that detects DeadCode virus."
tc_detection_type = "Virus"
+1
View File
@@ -10,6 +10,7 @@ rule Win32_Virus_Elerad : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "ELERAD"
description = "Yara rule that detects Elerad virus."
tc_detection_type = "Virus"
+1
View File
@@ -10,6 +10,7 @@ rule Win32_Virus_Greenp : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "GREENP"
description = "Yara rule that detects Greenp virus."
tc_detection_type = "Virus"
+1
View File
@@ -10,6 +10,7 @@ rule Win32_Virus_Mocket : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "MOCKET"
description = "Yara rule that detects Mocket virus."
tc_detection_type = "Virus"
+1
View File
@@ -10,6 +10,7 @@ rule Win32_Virus_Negt : tc_detection malicious
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
malware = "NEGT"
description = "Yara rule that detects Negt virus."
tc_detection_type = "Virus"